DSA-2021-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Summary: Dell PowerEdge VRTX remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
Affected Products & Remediation
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
Revision History
| Revision | Date | Description |
| 1.0 | 2021-04-14 | Initial Release |
| 1.1 | 2021-06-10 | Acknowledgments Updated |
Acknowledgements
Dell Technologies would like to thank Ken Pyle for his contributions.
Related Information
Legal Disclaimer
Affected Products
POWEREDGE VRTX, Product Security InformationArticle Properties
Article Number: 000185252
Article Type: Dell Security Advisory
Last Modified: 22 Nov 2021
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.